unplugged-vendor/device/google/bonito-sepolicy/vendor/qcom/common/vold.te

11 lines
306 B
Plaintext

get_prop(vold, vendor_tee_listener_prop)
allow vold sysfs_devices_block:file write;
allow vold sysfs_mmc:file write;
# allow vold to trim /mnt/vendor/persist by sending ioctl FITRIM
allow vold persist_file:dir { ioctl open read };
# generated by proc scan, unnecessary
dontaudit vold proc_irq:dir read;